CVE-2026-64338

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> USB: misc: uss720: unregister parport on probe failure<br /> <br /> uss720_probe() registers a parport before reading the 1284 register used<br /> to detect unsupported Belkin F5U002 adapters. If get_1284_register()<br /> fails, the error path drops the driver private data and the USB device<br /> reference, but leaves the parport device registered.<br /> <br /> Leaving the port registered is more than a private allocation leak:<br /> parport_register_port() has already reserved a parport number and<br /> registered the parport bus device, while pp-&gt;private_data still points at<br /> the private data that the common error path is about to release.<br /> <br /> Undo the pre-announce registration in the get_1284_register() failure<br /> branch before jumping to the common private-data cleanup path. Clear<br /> priv-&gt;pp first, matching the disconnect path and avoiding a stale pointer<br /> in the private data.<br /> <br /> This issue was identified during our ongoing static-analysis research while<br /> reviewing kernel code.